Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

While the AI itself wasn’t weaponized, the technique raises concerns about AI agents with broad system access.

A new tool from OpenAI evaluates AI agents’ ability to identify, patch, or exploit smart contract vulnerabilities. Researchers found that agents are better at exploiting vulnerabilities than finding ...

ActiveState, a global leader in open source language solutions and secure software supply chain management, today announced it has grown its catalog of secure open source components to 79 million, ...